php:php-fuzz-mbstring: Crash in left_adjust_char_head

Detailed Report: https://oss-fuzz.com/testcase?key=6583366850838528 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzerubsanphp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffff0358db2d Crash State: leftadjustcharhead...

oniguruma:fuzzer: Crash in left_adjust_char_head

Detailed Report: https://oss-fuzz.com/testcase?key=5261242773143552 Project: oniguruma Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanoniguruma Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffff3f53dc5b Crash State: leftadjustcharhead...

SUSE SLES11 Security Update : php53 (SUSE-SU-2018:0003-1)

This update for php53 fixes the following issues: Security issues fixed : - CVE-2017-16642: Fix timelibmeridian error that could be used to leak information from the interpreter bsc1067441. - CVE-2017-9228: Fix heap out-of-bounds write that occurs in bitsetsetrange during regex compilation...

CVE-2017-9229

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in leftadjustcharhead during regular expression compilation. Invalid handling of reg-dmax in forwardsearchrange could result in an invalid pointer...

CVE-2017-9229: NULL Pointer Dereference

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in leftadjustcharhead during regular expression compilation. Invalid handling of reg-dmax in forwardsearchrange could result in an invalid pointer...